MAPHJAHA MJIAJIEHOB* UDC: 343.2:341.1/.8 


JEJIEHA CTOJIUMA JABETUh™ Tlpernequu par 
IIpapuu dakysiTet 3a UpuBpery u II[pumspeu: 05.01.2021 
tpapocyhe y Hopom Cay Ono6peu: 28.01.2021 
Hosu Caz Crpana: 99-109 


DOI: 10.51738/Kpolisa2021.18.11.2.04 


AXKY PUPAE ,,.IPABA JA CE BYE 3SABOPABJBEH” 
KAO ITPHHUMMA 3AMITHTE TOTATAKA Y 
EBPOIICKOJ YHHJU 


Castcemak: Jla sm ,,1paBo ja ce Oyne 3a00paBsbeH” Tpeba Ja WOCMaTpaMo Kao 
IipeTHy cioOoqM TroBopa WIM KaO MexaHH3aM OCTBapHBalba IipaBa Ha IIpHBaTHOCT? 
Osaj HajKOHTpoBep3HHjH eJIeMeHT TIpaBa Ha IIpMBaTHOCT H 3allITHTe JIM4YHHX Tosa- 
Taka je 43a3Bao rmoOamHy WeOaTy O IpHBaTHOCTH UM cHOOOAM H3paxKaBatba. YIpkoc 
UMCHHLM ja je ,,IpaBo Wa ce Oyye 3a00paBsbeH” KOAMPUKOBAHO Y OKBUpy wWiaHa 
17 Ommte ypeaOe o 3alTHTH TofaTaka O JIMYHOCTH MH a Cy OCHOBHH MocTyaTH 
oBor TpaBa ed@unucanu y mpeymMety Tyra Wnanuja, onpehena nutaa u ase 
octajy 6e3 afleKBaTHor ogroBopa. Kako 6u ce cTeksIa jacHa HJjeja 0 caypKajy ,,upaBa 
na ce Oye 3a00paBJbeH”’, Kao IIPHHUNMa 3aliTHTe MoAaTaka, a y CKlayly ca HajHOBH- 
JOM e€BPOTICKOM TepcieKTHBOM, IIpeqMeT HCTpaxkHBakba Ce OJHOCH Ha aHasIM3y pa3- 
BOja IIpeAMeTHOr IIpaBa y CBeTIY peseBAHTHHX Mpomuca, kao HU jypucripyzenuuje 
Cyga mpapye Esporcke yuuje. Unanak Hajiipe ipy2Ka liperiey, KOHUerTa ,,mpaBa ja 
ce 6yge 3a00paBJbeH”, OF MpBHX Mpezora PopMyayuje OBor NpaBa, JO HajHOBH- 
jUX caypxKaHHx y aKTyeJIHMM TIponMcuma. Y HacTaBKy je moceOHa MaxHa mocBehe- 
Ha aKTYCJIHHM CTaHapyqMMa KOHLe!Ta ,,lpaBa Ja ce Oye 3a00paBsJbeH”’, ca aciieKTa 
HefaBHux mpecyyza Cyga mpapye Esporcke yuuje, TL u apyru npotus WHI u 
UHV npotus lyrna. Y oksupy 3aKJbyyHux pa3sMaTpakba, ayTopu ucTH4y MoTpeby 
TeCOPHJCKOr HHOBMpalba ,,lIpaBa Wa ce Oye 3a0opaBJbeH”, KAO HM yCIIOcTaBJbarba 
ajleKBaTHOr UpaBHOr OKBUpa HeroBor perysMcaka KakKO OM Ce peAMeTHO IIpaBo 
YKIONHIO Y KOHUeMT COMMOTeEXHHYKOr actieKTa MpaBHe KysiType. Lvs unaHKa ce 
OWHOCH Ha CarieqaBalbe MMIUIEMeHTalyje ,,paBa a ce Oye 3a00paBJbeH” y OKBH- 
py Exsporcke yHuje 1 HJeCHTHPUKOBarbe TIaBHUX 13a30Ba Y HABe]CHOM CMHCIIy. 


Kayune pewu: paso ga ce Oyfe 3a00paBsbeH, 3alITHTa MoyaTaka oO 
JIM4HOCTH, CBpOrcKa perysaTuBa, Jypucupyyzenunja Cyqa mpapye Esporicke yHuje 
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YBOAHA pasMaTpalba 


Koja je paBa BpeHOCT OCHOBHOr JbyACKOr IpaBa Ha IPHBaTHOCT HM 3allITHTY 
JIMYHUX Tosataka y ep Wurutanm3aunje? Y cpery HempeuH3Hux WpaBHuXx cTaHyap- 
qa y NWorsuedqy KOHTpOse AHTMTaHOr %KHBOTa M JMIMTasIHe aKTHBHOCTH NMojequHHA, 
Kao WH HejaCHHX HMIVIMKalWja JMrMTaIHOr MeMOpHcamha y KOHTeKCTy 3allITHTe 
JIMYHUX WosaTaka, He MOXKeEMO Ja 3aHeCMaPHMO YMHeCHMLY Wa pa3IMYHTH aciieKTH 
Hallie IpHBaTHOCTH Mory Ja Oyay 3HayajHo yrpoxeHn (MiageHos 2013, 576). by- 
myhu ga WntepHet uma roToBpo HeorpaHvyeH KamlaluteT mamhetba, BesIMKe KO- 
Mune MosaTaka Mory Ja Oyaqy WOCTyMHe TOKOM Heoypehenor BpeMeHckor TMepHo- 
qa, Te Ha pa3IMuuTe HayHHe yTH4y Ha ayTOHOMHjy nojequnua. Jlejpug JIunycej 
(David Lindsay) je HaBegeHu mpoOsmemM omucao Kpo3 dopMyalvjy ,,uMruTasHa 
BeyHocT” (Lindsay, 2014, 290). Majep-IWon6epr (Mayer-Schénberger) je 2009. 
roguue y yeny Delete naxHy jaBHOcTH ycMepvo Ha 4MHeHHLy a je WocTemeHo 
3a00paBJbakbe, CBOJCTBCHO JbyMMAa, 3A4MCHCHO ayTOMATH30BaHUM Tlamherbem IyTeM 
TexHosloruje (Mayer-Schénberger 2009). Y cpetsly HaBeyeHux 43a30Ba JMTMTasHOr 
00a, KOHUeMT ,,IpaBa qa ce Oye 3a00paBJbeH” MocTaBJbeH je y POKyc Hay4HHXx 
pacripasa. 

Kako 6n ce cTekuIa JacHa uyeja 0 caapxajy ,,paBa a ce Oye 3a00paBsbeH”’, 
KaO IIpHHUMMa 3alTHTe MowaTaka, a y CKylayly ca HajHOBHjOM eBPOTICKOM Mepcriek- 
THBOM, IIpeMeT HCTpaxkuBatba Ce OJHOCH Ha aHallM3y pa3Boja IIpe{MeTHOr papa y 
CBeTIIY peJIeBAHTHHX TIpomuca, Kao uM jypuciipyfwenunje Cyga upapge EsponcKe 
yHuje. Unanak Hajmpe mpy2ka lpersiey KOHUerrTa ,,1paBa fla ce Oye 3a00paBsbeH”, 
oO] NpBuX Tpesora PopMyaluje OBOr WpaBa, JO HajHOBHjHX CaypxKaHHXx y akTyelI- 
HHM Tponmucuma. Y HacTaBky je moceOHa maka TocBeheHa akTyesIHHM CTaHap- 
MMa KOHUe!ITa ,,upaBa Wa ce Oye 3a00paBJbeH”, ca aciieKTa HeaBHuXx IIpecysa 
Cyya mpapye Esporcke yuuje, TL u apyru npotus WHVJI wu WHI npotus yraa. 
Y tboxycy uctpaxuBatba cy NOTeHuMjatHe Tocrequue Mpecyya Cyya mpapye Es- 
policke yHuje Ha Jab pa3BOj KOHUerTAa ,,IpaBa Wa ce Oye 3a00paBsbeH”’, HapOdHTO 
y llorseqy (PYHKUHOHHCatba HHTEPHET IIpeTpaxuBaya. Y OKBUpy 3aKJbyYHHX pa3ma- 
Tpatba, ayTOpu HcTHYy MoTpeby Teopujckor HHOBMpalsa ,,IpaBa Ja ce Oye 3a0o0pa- 
BJbeH”, KaO MH YCIIOCTaBJbarba ajleKBaTHOr MpaBHOr OKBMpa HeroBor peryHcawa 
Kako OM Ce IpeAMeTHO MpaBo YKJIOMMIO Y KOHMeNT COUMOTeEXHHYKOr aciieKTa mpaB- 
He KysType. Lv uanKa je Qa oMoryhu yBuy y MMIJIeMeHTalHyy ,,lIpaBa a ce 
Oye 3a00paBsbeH” y oKBUpy ExBporicke yHuje H UZCHTHPUKOBarbE TaBHUX H3a30Ba 
y HaBeeHoM CMHCIy. 


Pa3Boj pasa Ja ce Oyze 3a00paB.ben 


Y mpaBHoj QOKTpHHM He MOCTOjJM KOHCeH3yC KaKO y Morweyy WocTojama 
,lIpaBa Ja ce Oye 3a00paBybeH”, TaKO HU y Horsexy HeroBor caypxaja. Teopujcku 
OKBUp carsieqaBarha JepuHHuNje ,,IpaBa Wa ce Oye 3a00paBsbeH” TO_pasyMeBa 
pa3IM4HTe Ipictyne HaBeyzeHoM muTapwy. IIpema JIuugcejy (Lindsay), mpaBo ya ce 
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Oyae 3a00paBsbeH je ,,pe3epBHCaHO 3a TIpaBO Ha yKJlaawe JIMYHHX NofaTaka Ha 
ViutepHety WIM Ha orpaHH4eH MpHcTyM HaBeyeHuM moganuMa” (Lindsay 2014, 
292). Kactesbano (Castellano) npeaMeTHo TpaBo Jeune Kao paso ,, Ha TpHuro- 
BOp IIpOTHB HeoBsawihene oOpaye JIM4HHX NofaTaka, Yak H Kaya cy TH Mozayu ca- 
IpoKaHu y jaBHUM JOKyMeHTuMa” (Castellano 2012, 29). ,,. Ipapo na ce Oye 3a00pa- 
BJbeH” Ce y KOHTCKCTY 3allITHTe JIMYHHX MOatTaka 3aCHHBa Ha WAejH Ja MojequHall 
Ma 1paBo Ja 3axTeBa yKilabakbe JIMYHUX HHPopMaLyja ,,Koje cy TocTymHe Ha Wn- 
TepHeTy HM KOje NOTCHUMjaIHO yrpoxaBajy HeroBy MpHBaTHOCT WIM a 3axTeBa 
IHHXOBO yKlabakbe V3 JIMCTe pesyliTaTa OHIajH MpetpaxuBarwa” (Guadamuz 2017, 
60). 

Vianunjamno dopmuparte JierMsicaTHBHOr OKBUpa KOHIUEIITA ,,IIpaBa a ce Oy- 
je 3a00paBsbeH” y oKBUpy Epporicke yHuje yCiocTaBJbeHo je ycBajatbem J[upeKTuBe 
O 3alTHTH Togataka 95/46/E3 4nju ce MpeyMeT peryscama OAHOCH Ha OOpaly u 
IIpHCTyN JIM4HHM MosayuMa nojequnaua y EY. JIupextusa 95/46/E3 mpegzBuha na 
JMYHM ToszayM Tpeba ga Oygy ,,pukylsbanu y ogpehene, u3pH4untTe u 3aKOHUTe 
HaMeHe, HM He cMejy Ja ce Jasbe OOpahyjy Ha HadHH KOjH je HelIpHMepeH THM HaMe- 
Hama’, Kao H ja CaMH Moga Mopajy Wa Oyazy ,,1pHMepeHH, pesleBaHTHH HM He CMe]y 
OTH TIpeKOMepHH y OAHOCY Ha HaMeHy pas Koje ce NIpukylbajy u/MIM ce Tasbe 
o6pahyjy” (Tupextusa 95/46/E3, Unan 6). Mopex Hapegenor, JIupextusa 95/46/E3 
je UpyxKala MoryhuHocT nojeqHHUWMa a 3axTeBajy Opucabe WIM OOKUparbe HUXO- 
BUX JIMYHMX Wosataka YKOIMKO OOpayla WIM YyBalbe HCTHX Hucy y cKIayy ca mpo- 
THcaHuM cTaHyapyuMa. Ossauiherme mojequHalla y HaBeeHOM CMHCJIy ce pa3BHJIO 
y paBo fla ce 3aXTeBa yKJlabalbe M3 JIMCTe pesylITaTa OHIajH NpeTpaxkuBalba, o7- 
HOCHO y KOHIIelIT ,,1IpaBa Ja ce Oye 3a00paBsbeH” (Criscione 2020, 318). 

CioxKeHOCT ,,1paBa ja ce Oye 3a00paBsbeH” y Wo6a WHTuTaM3alnyje je NPBu 
MyT carmeqana 2014. roquHe, y OKBUpy KOHTpoBep3He Mpecyye Cyya npapye Es- 
policke yHuje y cryyajy Cyrn npotus Wnancke arenunje 3a 3allTHTy Nofataka u 
Mapna Koctexe Tou3ameca (Google Spain SL and Google Inc v. Agencia Espanola 
Agencia Espafiola de Proteccién de Datos and Mario Costeja Gonzalez, CJEU, 
C-131/12). Wnancku apxapseannn, Mapno Koctexa Tousasec, je 3axTeBao of 
Tyrua qa uHdopmannje of pe 16 rogquna 0 jaBHoj MposajH HeroBe HMOBHHE ycley 
ayra, Oyty oOpucaHe v3 pesysitaTa OHJIajH mpetpare. MaTepmpetayuja J[upexrusBe 
95/49/E3, kao u usiana 8 Ilopesbe Epporicke yHuje 0 OCHOBHHM l1paBuMa ce 3acHH- 
Basia Ha cyleqehuM WHTabuMa: 

(1) qa 0M HHTepHeT MpeTpaxkuBaye MOXKeMO Ja TOCMaTpaMO Kao ,,KOHTposlope” 
KOMILI€MeHTapHo 3axTeBuMa wiaHa 2 JupextuBe 95/46/E3; 

(2) ga mm J[upextupa 95/46/E3 oOape3yje KomnaHnje 13BaH Esporcke yHuje; 

(3) Ha sm ap xaBsbann Ap xKaBa uaHuia Epporicke yHuje yxKUBa]y 3alITHTy 
,lipaBa Jja ce Oye 3a00paBsbeH” (Royston 2016, 257). 


Cya mpaspye Esporcke yHuje je mpecyquo a HHTepHeT TpeTpaxnBay Kao 
wto je lyri, ucttyHaBajy ycuoBe ZepuHuUMje KOHTposopa MogaTaka y cMUCIy 
yjaHa 2 J\upextupe 95/46/E3. Cyn je fase pa3matTpao mpumMeny J[upekTuBe 
95/46/E3 Ha Tyrm ycneyq uHeHuile fa ollepatep He BpLIM OOpany MosataKka y Op- 
%KaBM Y KOjOj je MOKpeHyT HocTynak. Y HaBeeHOM KOHTeKcTy CyJI je 3aKJby4no Ja 
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ce JupextuBa pumMermyje Ha Tyrm ycieq wnmeHnue Ja je OBa KOMMaHMja MyTeM 
wmlaHcke (usIMjale ycnocTaBisia KOHTpOJly aKTHBHOCTH y OJHOCY Ha WIMaHcKe p- 
*KaBJbaHe. Cy upapge Esporcke yHuje je mpecyquo fa ApKaBlbaHH ypoKaBa 
qiaHnya EY yxuBajy 3allTuTy ,,upaBa fa ce Oye 3a00paBsbeH” y cKJIayy ca ofpe- 
nOama JIupextuse 95/46 /E3, Te uMajy IpaBo Ja 3axTeBajy Ja WpeTpaxkuBadH MOMyT 
Tyrua ykloHe caypxaj W3 pe3ysITaTa Wperpare Koj ce ogHOce Ha HHdopmaLnje 
Koje cy HeTauHe WIM Hcy Bue peeBaHTHe. Hapeyena mpecyyza Huje ycloctaBusia 
allCOJIYTHO ,,lIpaBo Ja ce Oyye 3a00paBJbeH” yculey YnHeHULe Ja je Cy u3pH4ntTo 
HaryiacHO HeOMXOMHOCT ycTaHOBJbaBalba OallaHca y OCTBAapHBaly OBOr MmpaBa ca 
cTaHapAuMa 3allTHTe Apyrux OCHOBHMX JbyACKHX lipaBa y ckKilayy ca TPHHUMTOM 
IiponopuwouamnHoctu. Cy je HHTepHeT MpeTpaxkuBayHMa pellycTuo pelllaBarbe 
BpJIO eMKaTHOr MTatba Oallancupatta ,,lIpaBa a ce Oye 3a00paBsben” u cObore 
W3paxkaBalba, Te je OfyKa O HCIlyHeHOCTH ycCuIOBa IpMMeHe ,,lIpaBa Ja ce Oyze 
3a00paBJbeH” y ofpeheHuM OKOJIHOCTMMa MOBepeHa IPHBaTHHM KOMIaHHjama. 


Be3 o603upa Ha 4MHeHHLy a je HaBegena mpecyfa Cyya mpapye EsporcKe 
yHuje riobamHO Tpeno3HaTJbuBa y KOHTeCKCTy yCTaHOBJbaBalba ,,lIpaBa Ja ce Oye 
3a00paBJbeH”’, OHA HUje ,,cTBOpHsIa HOBO TpaBo Kao TakBO, Beh je Ha HHTepHeT Ipe- 
TpaxkuBaye MIpHMeHMIa NocTojeha mpaBa Ha UcIIpaBJbakbe, Opucare, OoKHpakbe H 
IipHropop Koja cy mpezBuhena J[upekTuBoM 0 3allITHTH MosaTaka MW Koja cy kao 
TakBa Beh MMalia CBOJy IpHMeHy y OfHOcy Ha JIM4He NosaTKe Koju cy oOpahuBann 
KaKO OJ| CTpaHe jJaBHHXx opraHa, TakO HM pHBaTHHXx cyOjexata ” (Guadamuz, 2017, 
62). 


Onwita ypej6a 0 3alTHTM NOAaTaka O JM4HOCTH 


IIperu3Hnja Bep3uja ,,ipaBa Ja ce Oyye 3a00paBsJbeH” je mpeyBuhena ogper- 
Oama Onuite ypeqOe 0 3allITHTH NofaTaka O JIMMHOCTH Koja je cTylMs1a Ha cHary 25. 
Maja 2018. roquHe (Ypen6a (EY) 2016/679 Esponcxor Hapnamenta u Capeta on 
27. ampuna 2016. o 3amiTuTH Pu3sH4KHX WHWa y OWHOcCy Ha OOpasy Mofataka o 
JIMYHOCTH, HW O CHOOOAHOM KpeTawy TaKBUX TosaTaka M O cTaBsbawy JupeKTuBe 
95/46/E3 Ban cnare, Regulation (EU) 2016/679). Unan 17 Onurte ypeaGe o 3amTH- 
TH NlofaTaka 0 JIM4HOCTH JepuHUUle ,,1paBo Ha Opvicarbe”, OAHOCHO ,,paBo Ja ce 
Oye 3a00paBJbeH” Kao TIpaBo JIMWa Ha KOje ce Moa OHOCe Ja 3axTeBa Opucare 
ToyatTaka OJ, cTpaHe KOHTposopa y ciy4ajy MocTojawa TakcaTHBHO HaBe{eHHXx Ipa- 
BHHX ocHoBa. OcTBapHBame HaBeyeHor papa je Moryhe y cslyyajy He3aKOHUTe 
oOpaye WIM 4yBarba JIMGHHX MoflaTaka, Kao Hu CiLy4ajy Wa IpeqMeTHH Tosa BUTE 
HHCY HeOMXOJHH Ca aciieKTa CBpXe IIpHKyliybawha, OFHOCHO OOpahuBarba. Jase, 
Mue Ha Koje ce OfHOCe MoOzalM Moxe Wa 3axTeBa Opvicawe MofaTaka 3a 4Mjy je 
oOpayy HeomxoyaH MpucTaHak yKOJIMKO je HcTH NoByyeH. Unan 17 Onurre ypezbe 
He Toxpa3yMeBa caMo OOaBe3y KOHTposOopa y KOHTeKCTy Opvicama osatTaka oO 
JIM4HOCTH, Beh HM clipeyaBarbe Jasber WMpera HaBeeHHX MofaTaka, Kao HU OOaBe3y 
Tpehux cTpana, kao WITO Cy HHTepHeT MpeTpaxuBa4dH, a OOpHUly JIMHKOBe Ka CTpa- 
HHWaMa Koje caypxe TakBe mofaTKe. Ca aciiekTa mpuMeue usana 17 Onmre ypez6e, 
4HMHH Ce Ja 3aXTeB 3a YKJlabarbeM HEOMTHHX HM 3acTapeJINX MOdaTaKa yCTaHOBJbeH Y 
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mpegmety [yr npotus Mapua Koctexe Tous3aneca Moxa Bue Hehe OuTH pese- 
BaHTaH. Ca pyre cTpaHe, TBpAha Ja je oBaj 3axTeB Beh yKby4eH y AeNoKpyr 3a0- 
paHe He3aKOHUTe OOpaye MozaTaka Ovsia On ONpaBsaHa yclleq YMHeHUUe Wa je Ha- 
BeJeCHH KOHLeCMT JOBOJEHO WIMpoK a OOyxBaTH H TakBa IIMTarba. 

Ynau 17 npeazBuha u orpannuera ,,mpaBa qa ce Oyfe 3a00paBJbeH” y WMby 
yCIlOcTaBybarha paBHOTexe H3Mehy OCTBapHBaka OBO paBa MW 3alliTHuTe cobore 
v3paxkaBarba. Jake, ,,mpaBo a ce Oyze 3a00paByben” je Moryhe orpaHw4untTn pag 
3allTHTe coOoye H3paxaBalba, HHTepeca jaBHOr 3paBsba, UCTpaxkMBalba y HCTO- 
pujcke, cTaTucTH4ke HM Hay4He cBpxe, pay MOWITOBawa 3aKOHCKe OOaBe3e Uy 
ciIy4ajeBHMa YCIIOCTaBJbalba, OCTBApMBalba WIM OAOpane WpaBHUXx 3axTeBa (Ypeqoa 
(EY) 2016/679, unan 17). bananc mpegBuhen unaHom 17 Onure ypeazOe octTaBsba 
UIMpoK TIpoctop WuckpewMoHe Tpolene, Te H MoryhHocT pexyKoBatba orcera mpu- 
MeHe ,,lIpaBa Ja ce Oye 3a00paBsbeH”. Ca Apyre cTpaHe, Wako HaBeyeHH V3y3elH 
HHCY Y TOTITYHOCTH OeCKOMIIPOMHCHH, OHH AOMpHHOce jacHHjem carieqaBawy oJ- 
pehenux quJiema ca aciiekTa MOTeHUMJaHe 310ymoTpebe ,,mpaBa qa ce Oye 3adopa- 
BJbeH ””. 

Tlopey Hapeyenor, Onuita ypeq6a o 3alITHTH MogaTaka 0 JMYHOCTH MoKpehe 
jou jeqHy 3HauajHy AWIemMy y cBeTJy 3alllTuTe ,,IpaBa Wa ce Oyze 3a00paBbeH”. 
OctBapuBalbe IIpe{MeTHOr IIpaBa He Moszpa3syMeBa Opucarbe OpHrHHasHor cayp%Ka- 
ja, Beh MocTaBJbakbe 3axTeBa a MHTepHeT TpeTpaxkuBad yKIOHM Be3y WO MCTOT. 
lake, 4H ce Ja ,,1paBo Wa ce Oye 3a00paBsbeH” Huje 3alpaBo 3a0opaB y Tpayu- 
IHOHaJIHOM CMMCIIy 3Hauerba OBOT TOjMa. OcTBapHBakbe IIpeAMeTHOT MpaBa MOcTojH 
lipetexHoO Ha WVntTepHety uv THYe ce obaBese yKilambakba ca JIMCTe TpeTpaxnBaya 
(Titiriga 2018, 59). 


Heyasne npecyyze Cyaa npaspye Epporncke yuuje 


Jlasbu pa3Boj ,,1IpaBa Wa ce Oye 3a00paBsbeH” Ce MO%Ke pasMOTPHTH Ca acrie- 
KTa HeqaBHUXx mpecyya Cyyza mpapye Esporcke yuuje. Cy je 2019. rogquHe qoHeo 
Be BaxkKHe IIpecye y KOHTeKCTy 3allTHTe mpeyMetHor pasa, TL] u apyru mwpoTus 
@panllycke arenuuje 3a 3amiTuTy mogataxa (LIHVJI) u Tyra npotus PpanuycKke 
areHIwje 3a 3aliTuty nogataka (I[HVJI) (GC and Others v Commission nationale 
de l'informatique et des libertés (CNIL), Case C-136/17; Google LLC, successor in 
law to Google Inc. v Commission nationale de l'informatique et des libertés (CNIL), 
Case C-507/17). Ppanuycka arenwuja 3a 3alITHTy NosaTaka je Ona crpaHa y o6a 
moctyika mpeyx Cyzom mpapye Esponcke yHuje. Mako je JJupextusa 95/46/E3 Ouna 
Ha CHa3H Y MOMEeHTY Kaj je HocTynak moyeo, Mpecyye Cyfa ce 3acHuBajy M Ha OJ- 
peaqOama Onmte ypeaGe 0 3alITHTH NogaTaka, yculeyq YHHeHHLe Ja je UcTa crynMa 
Ha CHary TOKOM Tpajatba MocTymka. 

Y npegmety I'L u apyru nporus WHI verupu nogHocuora mpeyctTasKe cy 
ce oOpatumm Cyny mpapae Esponcke yHuje Hakou wo je ITHWJI og6uo na Pyray 
TOCTABH 3aXTeB O YKJlabalby JIMHKOBa Ka MHTePHeT CTpaHHamMa Yj calpxKaj oby- 
XBaTa JIM4He MOAaTKe WOAHOCHTeJba MpeszcTaBKH. Caypxaj OBMX BeO CTpaHula Of- 
HOCHO Ce, H3Mehy octasor, Ha caTHpHIHy POTOMOHTaxy jeqHe NOUMTHYAapKe Koja je 
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MlOCcTaBJbeHa Ha MHTePHeT MO] TceyOHMMOM, Kao H Ha CyJCKy McTpary NOKpeHyTy 
IIpoTHB jeqHor NomMTHYapa. Y oBoM cyryyajy, Cy je Te@unucao mpenn3snuje yco- 
Be TIO, KOjHMa Moje {HHH MOry Ja 3axTeBa]y OJ, MHTepHeT MpeTpaxuBaya Ja yKII0- 
He JIMHK Ka CajipoKajHMa KOjH Ce OJHOCe Ha HUXOBE OCeTIBUBE JIMYHE MOsaTKe, Kao 
UITO cy HHopMaluje O NOUMTHYKOM Olpesesbewy, KPHBHYHHM CaHKUWjama, Bep- 
CKHM WIM PUuIO30PCKUM YBeperbuMa WIM MeMIUMHCKH TogauM. Y norneyy Kpu- 
BHYHHX Toctynaka, Cyq mpapge Esporicke yHuje je Harmacuo 2a cy MHTepHeT mpert- 
pawKuBayn y oOaBesu Ja Upusaroye pe3ysiTaTe Mperpare Ja oyroBapajy TpeHyTHO} 
cuTyalMju, Te qa BeO cTpaHulle Koje caypxe HajakTyesHHje MoqaTKe y HaBeyjeHOM 
CMMCJIM Oya IIpBe Ha JIMCTH pesyTata mpetpare (C-136/17, naparpad 78). 

Tokom ytBphuBara Ja JIM OM MHTepHeT MpeTpaxuBay TpeOaso a yKJIOHH Be- 
3e 0 BeO cTpaHulla Koje yKIby4yjy 3acTapese HHPopMaLje O KPHBMYHOM TocTyn- 
Ky IpOTHB JIMa Ha Koje ce ofHOCe ofpehene HHpopmaLnje, Cy mpapye Esporicke 
yHuje je Harsacno 3Hayaj caegehux cbaxtopa: 

1) npupogya u TexKHHAa KPHBHYHOr esa O KOMe Ce paciipaBlba; 

2) TOK H Mcxog MoctTynKa; 

3) BpeMe TIpoTeKIO OF, OKOHYAarba MOCTYIIKa; 

4) momox*Kaj Ma Ha Koje ce OAHOCe TOaln y jaBHOM 2%KUBOTY; 

5) MoHallatbe JIMa Ha Koje ce OAHOCe NOAH y NpouWocTu; 

6) HHTepec jaBHOCTH y BpeMe NOAHOMIeHha 3axTeBa 3a yKlababe petbepeHue; 

7) cagp2Kaj H OOIMK IIpeyqMeTHe HHMopMaLyje; 

8) nocnequue OOjaBsbuBakba IIpe{MeTHe HHPopMalluje 0 Mie Ha Koje ce HH- 
cbopmaruja onHOcu (Lamik 2020, 119; C-136/17, naparpad 77). 


Y cBeTuly HaBeqeHux 4HHeHHa, Cy mpapye Epporicke yHuje je 3aKJby4Ho 
qa ce 3a0paHa oOpage ogpehenux KaTeropuja OCeTIbUBUX JIMYHHX MWosaTaka OAHOCH 
MW Ha HHTepHeT MIpeTpaxkuBaya HM HarylacHO HEOMXOZHOCT yCMOcTaBsbalba aleKBaTHe 
TipolleHe paBHoTexe H3Mehy OCHOBHHX IpaBa JIMa Ha KOje ce Tosa ofHOcCe Hu 
lipaBa NOTeHUMjaHO 3aHHTepecoBaHux KopuicHuka Mutepueta y ckilaqy ca OKOJ- 
HocTHMa Ofpeheuor cyryyaja. 

Y npecygu Tyra mpotus WHVJI, Cya npapge Esporcke yHuje je pasmarpao 
TepHTOpHjasHH Ollcer OCTBapHBalba ,,lIpaBa Ja ce Oye 3a0opaBsben”’. Ilocrynajyhu 
y HaBeyeHoM IIpeymety, Cyy je Nokylao Ja pa3jacHu WWIeMy Ja JIM ,,l1IpaBo fa ce 
Oye 3a00paBJbeH” ToypasyMeBa OOaBe3se 3a OllepaTepe MHTepHeT TpeTpaxnBaya 
BaH Epporicke yHuje, MO IpeTHOcTaBKOM Ja je JIMWe Ha Koje ce ofHOce o”pehenn 
Towa HW Koje 3axTeBa OpHcabe MCTHX, Ap»%KaBJbaHHH WpxaBe uannue EY. Cyz je 
pa3mMatpao Moryhuoct rioGamHor NocTaBbakba TeorpacKux paula ,,lipaBa Ja ce 
Oye 3a00paBsbeH”, MOCeOHO y KOHTeKCTY UMHeHUIle a je ped O MpaBy uuje je oc- 
TBAapHBaklbe Hy2KHO ToBe3aHo ca MutTepHetom, Koj Kao TakaB He Nlo3Haje rpaHuye 
mpxasa. IIpeqmet Tyra npotus LHVJI je unuuupan ofOujawem Tyrua qa noctynu 
tio 3axtesy LIHVJI-a koju ce oqHOCHO Ha yKJlabalbe JIMHKa Ka OFpeheHom caypxKajy 
3 CBUX Bep3HJa HeroBor NpetTpaxkuBaya WHpoM cBeTa. lyri je TBPAMO Wa je mpema 
AKTYCJIHO] CBPOMCKO] peryaTHBU O ,,uIpaBy Wa ce Oyye 3a0opaBsbenH” y oOaBe3n Ja 
YKJIOHH CaMO JIMHKOBE KOjH Ce MOjaBJbyjy Y pe3sysITaTHMa IIpeTpare cIIpoBexeHuM y 
Bep3HjaMa lIpetpaxkuBaya Ca JOMeCHMMa KOjH OZToBapajy WpxkaBaMa wiaHnyama EY. 


104 


Kyntypa nomuca, roy. XVIII (2021), Op. 44, crp. 99-109 





Tyra je 3aTHM mpeyoxKHO ynoTpeby reorpadckor O0KMpatba 3a [pyre eKcTeH3nje 
TOMeHA, Mepy Koja OM clIpednia IpHKa3sMBarbe Besa Y OKBUpPy petTpara U3BpLWIeHHX 
y MpanuycKkoj, 6e3 oO63upa Ha JOMeH IIpeTpaxkuBaya KojH ce KopucTH. Tyrm ce 06- 
patvo J[pxxaBHom caBeTy Tpaxehu fa NOHMMITH HOBYaHy Ka3Hy of 100.000 expa 
Kojy Je u3pexao WHI. Ycneq unmenuue ya je [pxaBuu caBet youno HexoymuLe 
TIOBOJJOM TyMayerbem 4laHoBa 12(6) u 14(a) Jupexrupe 95/46/E3, ynytTno je 3axTes 
3a OJIyKy O TpeTxoqHOM mMTawy Cyzy mpaspge Esporcxe yuuje. Ilocrynajyhu mo 
HaBeJIeHOM 3axTeBy, Cyq mpapye Esponcke yuuje je nopex JIupextuse 95/46 /E3, 
pa3matpao uiaH 17 Onwite ypeaOe o 3aliTHTH Mogataka, kao vu Ipecygay Tyra mpo- 
TuB Ton3aneca. Haj3HauajHuja WusIema ca Kojom ce Cy cyouno y OBOM TpeyzMeTy 
oqHOcHsIa ce Ha IIpHMeny perylaTuBe EY o ,,mpapy a ce Oyfe 3a00paBsbeH” Ha 
HauHH KOJM On Olepatepa MpeTpaxHBaya OOaBe3HBaO a YKJIOHH JIMHKOBe Ka OJ- 
peheHom caypxajy Ha CBHM JOMeHHMa KOje KOpHcTH TpeTpaxkuBay WIM caMO y 
Bep3HjaMa Koje OfroBapajy ZpxKaBaMa wWiaHulja EpporcKe yHHje, OJHOCHO caMo y 
Bep3HJH Koja OAToBapa ApxaBi WiaHHUM WpeOuBasIMUTa Ocobe Koja 3axTeBa yKIIa- 
Hhalbe JIMHKa Ka Of:peheHom caspxajy (C-507/17, naparpad 43). 

Tlogp>xasajyhu aprymeute Tyria, Cy mpapye Esporcke yuuje je 3aKJby4Ho 
ja y cKlajly ca peryaTHBoM Epporke yHuje ollepatepu TpeTpaxkuBaya HUCy TyKHH 
qa ykJlabajy JIMHKOBe Ha CBM Bep3HjaMa cBOor peTpaxkvBaya WIMpOM cBerTa. 
Mehytum, mpema ucTO] Ipecy4u, olepaTepu Mopajy a yKIOHe cBe Be3e Ha CBHM 
Bep3HjaMa IIpetpaxuBaya y YHHjH , Oe3 OO3Hpa Ha TO OfaKJIe 3aXTeB 3a YKJIawbalbeM 
MHKa ToTuye u3 EY. Cyy je uctaxao ya Jupextusa 95/46 /E3 u Onuita ypen6a o 
3alUTHTH WofatTaka He yKa3yjy Ha TepHTOpHjaHH OFicer ,,lIpaBa fa ce Oyze 3a0opa- 
BJbCH” H3BaH [pxkaBa uiaHuua EpBporicke yHuje, HATH HaMepaBajy ja HaMeTHy 00a- 
Be3y OllepaTepuMa TipeTpaxkuBaya Ha Bep3sHjaMa [IpeTpaxkuBaya KOje He OAToBapajy 
OMeHMMa [IpoKapa wiaHuia YHuje. UWunu ce ga je Cy mpapge Esponcke Yuuje 
Tiperio3Hao Ja eKcTpaTepHTopHjasHu Ollcer IpHMeHe ,,IIpaBa Wa ce Oyye 3a00paB- 
JbeH” He Ou OHO y CKuIaly ca YHHeHHIIOM Ja paBHH CHCTeMM OpojHuXx WpxKaBa koje 
Hucy wiaHHue EY ne no3Hajy upexMeTHo paso. Ilopoqom TexHuke reo-OsloKaze 
Kojy Kopuctu Tyran, uako Cy Huje moceOHO HaBeo OBO TIMTabe, HCTakKao je fa cy 
ollepaTepu lipeTpaxkuBaya yxKHM Ja IpHMeHe Mepe koje he cupeantTu WIM O30HJbHO 
oOecxpaOpuHTH KOpHCHuKa HHTepHeTa KOjH Bp perpary u3 jeqHe ApxKaBe 
qiaHnye YHuje Ja UPHCTyIM YKIIOHeHHM JIMHKOBUMAa IIpHIMKOM yioTpebe Bep3uje 
lipeTpakuBaya Yj OMeH He OFToBapa pxKaBamMa wiaHuyama EY (C-507/17, ma- 
parpad 73). 

Y cpeTy HaBeweHux cTaHoBulita Cyya npaBye Epporicke yHuje, HHH ce 7a 
lipecyya y upegmety Tyra npotus WHI npegctassea tpujyme 3a yra u Besmke 
MYJITHHAUMOHaIHe TEXHOJIOMKe KOMMaHHje. Ca Apyre cTpaHe, naparpad 72 mpecy- 
je O4 Morao fa HeyTpasIMue Tobegxy Tyra y oBoM cylyyajy Kpo3 yCTaHOBJbaBarbe 
MoryhHocTH JpKaBa 4laHnya Wa y opeheHHuM OKOJIHOCTHMa 3axTeBajy Of olepa- 
Tepa lIpetpaxuBaya a yiyhuBate Ka CIOpHOM CalpxKajy yKOHe 3 CBHX Bep3uja 
lipetpaxusBaya. Cy je Wpelo3Hao HaIexKHOCT [pxkaBa Wanna a 3axTeBajy ri0- 
OaIHO OCTBapHBalbe ,,lIpaBa ja ce Oye 3a00paBJbeH” KpoO3 YCIOCTaBJbalbe PaBHO- 
Texe M3Mehy lpaBa Ha IpHBaTHOCT HM 3alUTHTy JIM4HMX WOsataka ca jeqHe H c000- 
ae HHPopMucarba ca Apyre cipaHe, y cBeTy HalMOHaHMX CTaHAapya 3alliTuTe 
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OCHOBHHX IIpaBa. Kako 64 y HaBeJeHOM CMMCIy ApKaBe WiaHHe cTBOpWie yaupu- 
KOBaHe CTaH~paye MOcTyMawa, HeEOMXOAHO je Wa ycTaHoBe capayby KOMITJIeMeH- 
TapHo 4laHoBuMa 32, 33 u 34 OnmTe ypegbe o 3allITHTH TosaTaka, Kao CerTMeHT 
Koxe3Houe NomuTHKe. Jjaxne, LTHMJI uma mpaso ya 3axTeBa Of ollepaTopa Mmperpa- 
*KUBAa a YKIIOHM OApeheHe JMHKOBe Ca CBUX Bep3Hja IpeTpaxkuBada YKOJIMKO je 
3alUTHTa TipaBa jiMia Ha Koje OAHOCe MOZayM onpaBsaHa y ckulaqy ca WpeTxoqHo 
HaBeJeHHM CTaHyapquMa. 


Cayuaj Cyra npotus LIHVJI je y kontexcty ocTBapuBatta ,,paBa Ja ce Oyze 
3a00paBJbeH” OcTaBHo 3HayajHy AMIemy upex Cyy mupapye EsporcKe yHuje. Yko- 
muko Ou Cy npexBuyeo yxKuBarbe TpeyMeTHOr MpaBa y cBeTIy rioOanHor yKIa- 
Haba JIMHKOBA KOje Ou O6e3be RHO MyHy 3alTHTy WpaBa Ha PHBATHOCT HU 3alTHTy 
Tloqataka, pH3HKyje a yIpo3u CBO} JerHTHMUTeT 3aMparemM y CyBepeHUTeT Tpe- 
hux ApxKaBa ca aciiekTa MpoleHe yciocTaBJbakha paBHOTe%Ke OCTBAPHBalba OCHOB- 
HHX JbyJICKUX papa (Samonte 2019, 844). Ca apyre crpaHe, perMoHasHH Npuctym 
KojH OM UpxKaBJbaHuMa pxKaBa uaHuua Esporcke yHuje rapaHToBao 3allITHTy 
,lIpaBa a ce Oye 3a00paBsbeH” camo y oxBupy EY, Hamehe pernonamne rpannie 
3alUTHTe HW yKMBara OBOF IIpaBa 4Hje ce OCTBapuBalbe peamu3yje Ha MutepHery 
KOjH TakBe rpaHuie He mo3sHaje. UuHennya Wa je Cy upecyqMo y KOpucT TepuTo- 
pujaHor orpaHuyerba ,paBa a ce Oye 3a00paBJbeH” HM HCTOBpeMeHO OcTaBHO 
MoryhHocT rioOaHor OCTBapHBawa OBOr MpaBa OCTaBJba IIpeTXOMHO HaBeeHy 
ausemMy 6e3 ayjeKBaTHOr OJTOBopa. 


3akby4ak 


Y cBeTily aHasiv3e KOHUerTa ,,paBa a ce Oye 3a00paBJbeH”’, 4HHH Ce Ja je 
TIpeqMeTHO paBo MorpeltHO HMeHOBaHO. Haume, y KOHTeKCTy HOoBe JHIMTasHe 
peasIHOCTH, TyMayere ,,IpaBa Ja ce Oye 3a00paBJbeH” Kpo3 MOoryhHocT mocTaB- 
Jbakba 3aXTeBa 3a yKJlaHbakhe Oppelhenux nogataka Ha VntepHery He 3Ha4dM Ja cy 
OHH 3avcTa 3a00paBJbeHU y TpagMuMoHaHOM cmucsy. J[pyrum peunma, ,,mpaBo ya 
ce O6yne 3a00paBsbeH” He Nospa3yMeBa 3alcTa OpHcare calpxaja MOBOOM Kora 
JMUe Ha KoOje ce NOAA OFHOCe 3axTeBa OCTBAapHBalbe OBO paBa ycuey YHHeHuLe 
ja actu octaje Ha Vutepuety. UntTepHet upetpaxuBayn cy WyKHU camo Ja npHwa- 
Toye cBoje CHcTeMe Kako ce ofpehene Be crpaHuue He On NojaBusie y pesyiTaTuMa 
lipetpaxkuBalba Ha OCHOBy MIpeTpare onpehenor uMeHa. Ca Apyre cTpaHe, Moxa 
OHCMO YMECTO TBPAHe a je WeO KOHLelT IpeyqMeTHOr IpaBa MorpeLwHO HMeHoBaH, 
MOF Ja WputaroquMo TyMavere HCTOr HOBHM CTaHAapauma WurutTanHor 06a u 
qa Wokymamo ja Oynemo dbiekcnOunHHjM y Normexy TpaqumMoHamHor 3Hauema 
ynotpeOsbeHe (ppa3e. Yoctasiom, (okyc ,,upaBa fla ce Oye 3a00paBsbeH” ce He OF- 
HOCH TOJIMKO Ha CaMy 4HmeHUy Ja Oyqemo 3a00paBsbeHU y TpasMUMOHasIHOM 
CMMCIy 3Haverwa OBOT MOjMa, KOIMKO OfpaxkaBa KOHI[CMT yClocTaBlbakha Mpei3- 
HX WpaBHHXx CTaHapya 3alliTHTe IMYHUX MoOsaTaka. 


jl IpaBo Wa ce Oye 3a00paBsbeH” KaO HOBO KpeupaHo JIM4HO TpaBo je jou je- 
TjaH MOKylWaj yCiOCcTaBJbalba KOHTposle OF CTpane JMMa Ha KOje ce Tosa OFHOCE, 
KaO WH TOQM3ama CBECTH O OZTOBOPHOCTH ynoTpebe AHTMTaIHUXx TexHOJoruja u 
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Viutepueta. CacBuM curypHo mpomucu He Mory a ce Memajy HCTOM Op3HHOM Ko- 
jOM ce OfBHja pa3Bo] AMTMTaHux TexHosornja H MntepHeta, am uMajyhu y Bugy 
OCHOBHe IOjMOBe HHAMBUAyalHe ayTOHOMHMJe TOKOM kKopHiuhema u perymucawa 
ynotpe6e MutepHeta, kao HM WMIHTaHHX TeEXHOJOrHja YONUITe, Kopak CMO O1MKe 
cTBapamby MOrogHOr WHruTaHor OKpy2Kerba ca aciieKTa 3alTHTe UpHBaTHOCTH 
(Crojumh Jladetuh, 2020, 162). 

Ha ocHosy akTyjleHHx mponuca Epporcke yHuje, Kao HU jypucripyzenuuje 
Cyga mpapye Esporcke yHuje, ,,1paBo Ja ce Oyze 3a00paByben” Tpeba TocmaTpaTu 
KaO OCHOBHO JbyACKO IIpaBo KOje yKJby4yje YCHOCTaBJbalbe paBHOTeExe IIpaBa Moje- 
MHA Ha 3alTHTy WOsaTaka M WpaBa jaBHOCTH la 3Ha. JeqaH of Haj3aOpuHaBajy- 
hux cerMenata ,,lIpaBa jla ce Oye 3a00paBJbeH” ycTaHOBJbeH Kpo3 IIpaxcy Cyya 
Iipapye Esporcke yHuje ce O2HOCH Ha YMHeHHLY Ja Ou IpHBaTHa KOMIIaHHyja, Kao 
uto je lyr, TpeOana fa WoHece KOHauHy OJIyKy O peseBaHTHOCTH TosatTaka ca 
actieKTa jaBHOr HHTepeca, Te a IpoleHu Ja 1M je Moryhe yKlaHbatbe HCTHX H3 JIMC- 
Ta lIpetpaxuBatwa. Crora je HeomxogHO WepuHucaTH WOMAaTHa WeTasbHa yilyTCTBa 
ollepaTepuMa lipeTpaxxnBaya y Morseyy MpHMeHe ,,1paBa fla ce Oye 3a00paBsbeH”, 
6e3 OO3Hpa Ha YHHeHMLy Wa Cy OCHOBHH MpaBHH MOCTyaTH OCTBapHBakba CaMor 
lipaBa npexzBuhenu oxpeyqOama Onuite ypegOe 0 3allITHTH Mofataka. 

IIpaxca Cyga mpapge Esponcke yHuje npezBuha uMIMieMeHTaunjy ,,1paBa fa 
ce Oye 3a00paBJbeH” OF CTpaHe onepaTepa UpeTpaxnBaya Kpo3 yBe daze. IIpBa ce 
OWHOCH Ha OOaBe3y OllepaTepa a MpoBepH Ja JIM WpaBo Hua Ha KOje ce OAHOCH 
TloqallH HMa WpesHOCT y KOHKpeTHO] CUTyallMjH Hay] CKOHOMCKHM MHTepecom orie- 
paTepa WIM lpaBoM jaBHOcTH Ja 3Ha. TOKOM ~pyre (ba3e, ollepaTepu cy AyKHU Ta 
olpeze TepHTopujaHu oOum ,,paBa Ja ce Oye 3a00paBJbeH”’, Ha OCHBY CTaHapya 
yCTaHOBJBeCHHX IIpecyyom y cayyajy Cyra mpotus LHVJI. Wako Cyy Huje ycrano- 
BHO OCTBapHBalbe ,,lIpaBa Ja ce Oye 3a00paBJbeH” u3BaH Esporicke yHuje, He MO- 
%KeMO 3aHeMapHTH UMHeHULy Ba UntTepHet He mo3Haje reorpadcxke rpanuue. JIa- 
Kile, 00a HH WpoOsIeMu 3axTeBajy rioOamHa pelea. 

3allTHTa MIpHBaTHOCTH HW JIMYHHX MOdaTaka y ep AMTuTaM3aluje moqpa3y- 
MeBa OpojHe 13a30Be. C THM y Be3H, He MOCTOJH e*uKacaH TpaBHH JIeK y KOHTCKCTY 
MOBpeye IpHBaTHOCTH WIM JbyACKor AOCTOJaHcTBa y WurutTaswHOM Zomeny. Ha cBa- 
KOM 4laHy WpyliTBa je Ja ofpequ orpanwuerba Mohu wHdopMalMoHor caMool- 
pehera nojegunaua Ha Vutepuerty. 
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AN UPDATE ON THE RIGHT TO BE FORGOTTEN AS A PRINCIPLE OF 
PERSONAL DATA PROTECTION IN EUROPEAN UNION 


Summary: Should we consider the right to be forgotten as a threat to free spe- 
ech or the mechanism of the right to privacy? This most controversial element of the 
right to privacy and personal data protection caused the global debate on privacy and 
freedom of speech. Despite the fact that the right to be forgotten is codified in Arti- 
cle 17 of the General Data Protection Regulation and that fundamental postulates of 
this right were defined in Google v. Spain, there still remain unresolved issues. In 
order to gain a clear idea of the content of the right to be forgotten, as the principle 
of data protection in accordance with the latest European perspective, the subject 
matter of the paper refers to analyses of the developments of this right in the light of 
relevant regulations, as well as of the jurisprudence of the Court of Justice of the 
European Union (CJEU). The article firstly provides an overview of the concept of 
the right to be forgotten, from the very early proposals that gave rise to it, to the 
latest ones contained in recent regulations. Furthermore, the special attention is de- 
voted to the new standards of the concept of the right to be forgotten from the aspect 
of recent rulings of the CJEU, GC et al v. CNIL and CNIL v. Google. Within the 
concluding remarks, the authors highlight the need for theoretical innovation and an 
adequate legal framework of the right to be forgotten in order to fit this right within 
the sociotechnical legal culture. The goal of the article is to provide insight regard- 
ing the implementation of the right to be forgotten in the European Union and to 
identify the main challenges with respect to the issue. 

Keywords: right to be forgotten, personal data protection, European regula- 
tion, jurisprudence of the CJEU 


Introductory remarks 


What is the true value of the fundamental human right to privacy and personal 
data protection in the digital age? In the world where there are imprecise legal stan- 
dards regarding the control over people’s digital life and individual’s digital activity, 
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as well as unclear implications of digital memorization in the context of personal 
data protection, we cannot ignore the fact that various aspects of our privacy could 
be seriously jeopardized (Mladenov 2013, 576). Since the Internet has an almost 
unlimited capacity to remember, accessibility of a large amount of data could persist 
over time and influence toward the autonomy of the individual in different ways.' 
David Lindsay describes this problem through the formulation of “digital eternity” 
(Lindsay 2014, 290). In 2009 Mayer-Schénberger’s book Delete draw the attention 
of the public to the fact that gradual forgetting, as experienced in the human brain, 
has been replaced by automated memorization through technology (Mayer- 
Schénberger 2009). In the light of the above challenges of the digital age, the emer- 
gence of the concept of the right to be forgotten has become the focus of the 
scholar’s debate. 

In order to gain a clear idea of the content of the right to be forgotten, as the 
principle of data protection, in accordance with the latest European perspective, the 
subject matter of the paper refers to analyses of the developments of this right in the 
light of relevant regulations, as well as of the jurisprudence of the Court of Justice of 
the European Union (CJEU). The article firstly provides a broad overview of the 
concept of the right to be forgotten, from the very early proposals that gave rise to it, 
to the latest ones contained in recent regulations. Furthermore, the special attention 
is devoted to the new standards of the concept of the right to be forgotten from the 
aspect of recent rulings of the CJEU on the application of this right, GC et al v. 
CNIL and CNIL v. Google. The authors focus on the potential effects of the decision 
of the CJEU and its impact on the further functioning of the right to be forgotten 
particularly in relation to Internet search engine operators. Within the concluding 
remarks, the authors highlight the need for theoretical innovation and an adequate 
legal framework of the right to be forgotten in order to fit this right within the socio- 
technical legal culture. The goal of the article is to provide insight regarding the 
implementation of the right to be forgotten in the European Union and to identify the 
main challenges with respect to the issue. 


Development of the right to be forgotten 


There is no consensus in legal doctrine regarding the content of the right to be 
forgotten or whether this right should exist in the first place. The theoretical frame- 
work with respect to the definition of the right to be forgotten provides various ap- 


' One of the main components that distinguishes the right to be forgotten from other rights is 
that the subject of this right is not referring to illegal data. The subject of the above mention 
right are personal data that are in compliance with law at the moment when they are pub- 
lished. Personal data that are lawful at the time of publication can become illegal in any time 
period (Tasar and Atas 2020, 14). 
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proaches to the issue. According to Lindsay (2014, 292) right to be forgotten is “re- 
served for the right to have online personal data removed or to have access to data 
restricted”. Furthermore, Castellano (2012, 29) defines this right as a right “to cancel 
and object personal data against the unauthorized processing of personal data, even 
when this data is contained in public documents”. The right to be forgotten in the 
context of the personal data protection relies on the idea that the individual has the 
legal right to remove information about himself “that is accessible online and that is 
potentially damaging to one’s enjoyment of a private life, or more accurately, to 
have it de-listed from search engine results” (Guadamuz 2017, 60). 


The initial creation of the legal background of the concept of the right to be 
forgotten within the framework of the European Union began with the Data Protec- 
tion Directive 95/46/EC, which regulated the processing of and access to personal 
data of individuals within the EU. The Directive 95/46/EC stipulated that personal 
data should be “collected for specified, explicit and legitimate purposes and not fur- 
ther processed in a way incompatible with those purposes”, as well as that they sho- 
uld be “adequate, relevant and not excessive in relation to the purposes for which 
they are collected” (Directive 95/46/EC, Article 6). Furthermore, the Directive 
95/46/EC provided the possibility of individuals to require their personal data to be 
removed or blocked if usage or storage of data are not in accordance with the pre- 
scribed methods. This empowerment of individuals later became known as the right 
to be delisted or commonly referred to as the right to be forgotten (Criscione 2020, 
318). 

The complexity of the right to be forgotten in the digital age was firstly illus- 
trated in 2014 in the CJEU’s controversial decision in the Google Spain SL and Go- 
ogle Inc v. Agencia Espanola Agencia Espanola de Proteccién de Datos and Mario 
Costeja Gonzalez (CJEU, C-131/12.). A Spanish citizen, Mario Costeja Gonzilez, 
requested Google to remove from its search engine his personal data about his bank- 
ruptcy that had taken place sixteen years before. Interpretation of the Directive 
95/46/EC, as well as Article 8 of the Charter of Fundamental Rights of the European 
Union, was ground on several issues: 

(1) whether search engines should be considered as data controllers within the 
meaning of Article 2 of the Directive 95/46/EC; 

(2) whether the Directive 95/46/EC imposes the obligations to Google Spain or 
companies outside the European Union; 

(3) whether citizens of the European Union have the right to be forgotten (Roys- 
ton 2016, 257).” 


* Article 2 of the Directive 95/46/EC defines “processing of personal data” or “processing” 
as “any operation or set of operations which is performed upon personal data, whether or not 
by automatic means, such as collection, recording, organization, storage, adaptation or altera- 
tion, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise mak- 
ing available, alignment or combination, blocking, erasure or destruction” and “controller” as 
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The CJEU ruled that a search engine like Google could be classified as proc- 
essing personal data, and thus are to be considered as data controllers in compliance 
with the Directive 95/46/EC. In addition, the CJEU considered an application of the 
Directive 95/46/EC to Google in the light of the fact that Google performed data 
processing outside of the state in which the complaint was filed. The CJEU con- 
cluded that the Directive could apply to Google since Google Spain was established 
by Google Inc and directed activities towards the inhabitants of Spain. Finally, the 
CJEU ruled that citizens of the EU have the right to be forgotten in compliance with 
the provisions of the Directive 95/46/EC and therefore, to request that search en- 
gines such as Google remove entries from their search results that lead to content 
that is irrelevant, excessive, or unnecessarily defamatory. This ruling has not created 
an absolute right to be forgotten and the CJEU explicitly clarified that the realization 
of this right needs to be balanced against other fundamental human rights in accor- 
dance with the principle of proportionality. The CJEU left to search engines a very 
delicate issue of balancing the right to be forgotten with freedom of expression. 
Therefore, it is up to private companies to decide whether the right to be forgotten is 
applicable under certain circumstances. 


Even though, the CJEU decision in the Google Spain has been universally 
known as one that emerged the right to be forgotten, it has not “created a new right 
as such, it has simply applied to search engines the existing rights to rectification, 
erasure, blocking and objection which are present in the Data Protection Directive 
and were already applied to personal data gathered by public authorities or proc- 
essed by private entities” (Guadamuz 2017, 62). 


The General Data Protection Regulation 


More precise version of the right to be forgotten is provided by the General 
Data Protection Regulation (GDPR) which applies from 25 May 2018 (Regulation 
(EU) 2016/679). Article 17 of the GDPR defines the right to erasure or the right to 
be forgotten as the right of the data subject to request the erasure of its data from the 
data controller if one of the legal grounds applies. This right is applicable to unlaw- 
fully processed or stored data, as well as to the personal data that are no longer 
needed in the light of the purpose for which they were collected or processed. More- 
over, the data subject can obtain the erasure of data for which the data subject with- 
draws consent on which the processing is based. Article 17 requires not only a con- 


“the natural or legal person, public authority, agency or any other body which alone or 
jointly with others determines the purposes and means of the processing of personal data; 
where the purposes and means of processing are determined by national or Community laws 
or regulations, the controller or the specific criteria for his nomination may be designated by 
national or Community law” (The Directive 95/46/EC, Article 2). 
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troller to erase certain personal data, but also to preclude the further dissemination of 
the data, and to oblige third parties (such as search engines) to delete links to such 
data. From the aspect of Article 17 it seems that the requirement of removing irrele- 
vant and out-dated data established in Google Spain may no longer be relevant. On 
the other hand, it could be argued that this requirement is already included within the 
scope of the prohibition against unlawful processing since it is broad enough to ad- 
dress such action. 

In addition, Article 17 specifies the limitations of the right to be forgotten in 
order to create a balance with freedom of expression. Thus, this right is not applica- 
ble for the purpose of the protection of the freedom of expression, interests in public 
health, research for historical, statistical and scientific purposes, for compliance with 
a legal obligation, and in cases where restriction instead of erasure should follow 
(Regulation (EU) 2016/679, Article 17). We cannot ignore the possibility that this 
inbuilt balance may serve to further dilute the power of the right to be forgotten. 
Even though the provided exceptions are not fully uncompromised, they help to 
address certain concerns regarding the possible abuse of the right to be forgotten. 

Besides that, the GDPR raises another significant concern in the light of the 
right to be forgotten. Application of this right doesn’t undermine the original content 
directly, it only requires that a search engine should remove the link to the content. 
Thus, it seems that the right to be forgotten is not really about forgetting, as much as 
it refers to de-listing. It exists mainly on the Internet and concerns the obligation of 
de-listing by search engine providers (Titiriga 2018, 59). 


Recent CJEU’ decisions 


Further development of the right to be forgotten may be considered from the 
aspect of the recent decisions of the CJEU. In 2019 CJEU ruled on two cases regard- 
ing the above-mentioned right, GC and Others v Commission nationale de I'infor- 
matique et des libertés (CNIL) (C-136/17) and Google LLC v. Commission nationale 
de l'informatique et des libertés (CNIL) (C-507/17). The French data protection au- 
thority Commission Nationale Informatique et Libertis (CNIL) was party to the pro- 
ceedings before the CJEU in both cases. Even though the Directive 95/46/EC was in 
force at the moment when the proceedings were started, CJEU’s judgments also 
refer to the GPRD due to the fact that it was applicable during the court process 
period. 

In GC and Others v CNIL four applicants brought complaints before the 
CJEU following the CNIL's refusal to serve formal notices on Google to de- 
reference various links to web pages that include their sensitive personal data. The 
content of these web pages was referring, among other things, to the satirical photo- 
montage of a politician that was placed online by pseudonym and judicial investiga- 
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tion of a politician. In this case, the CJEU provided more precise conditions under 
which individuals can obtain de-listing by Internet search engine operators related to 
a link to a web page on which sensitive data are published, such as information re- 
garding political opinion, criminal conviction, religious or philosophical beliefs or 
medical data. With respect to the criminal proceedings, the CJEU emphasized that 
search engine operators are obligated to amend search results “in such a way that the 
overall picture it gives the internet user reflects the current legal position, which 
means in particular that links to web pages containing information on that point must 
appear in first place on the list” (C-136/17, Paragraph 78). Furthermore, during the 
determination of whether the search engine operator should remove links to web 
pages that include outdated information on criminal proceedings against a data sub- 
ject, the CJEU emphasized the significance of the following factors: 

1) the nature and seriousness of the offense that is being discussed; 

2) the progress and the outcome of the proceedings; 

3) the time elapsed since the end of the proceedings; 

4) the position of the data subject in public life; 

5) the conduct of data subject in past; 

6) the public’s interest at the time of the de-referencing request; 

7) the content and form of the publication in question; 

8) the consequences of the publication for the data subject (Lamik 2020, 119; C- 

136/17, Paragraph77). 


In light of the above facts, the CJEU concluded that the prohibition on proc- 
essing certain categories of sensitive personal data applied to search engine opera- 
tors and highlighted that the balance between the fundamental rights of the data sub- 
ject and the rights of potentially interested internet users must be assessed on a case- 
by-case basis. 

In the judgment C-507/17, Google LLC v CNIL, the CJEU ruled on the territo- 
rial scope of the right to be forgotten. Under this judgment, the CJEU provided an 
answer to the question whether the right to be forgotten imposes obligations on 
Internet search engine operators outside the European Union, assuming that the data 
subject lives in the EU. The CJEU considered the possibility of global set a geo- 
graphical boundary on a right to be forgotten, especially in the context of the fact 
that this right is inextricably linked to the borderless internet. The C-507/17 con- 
cemed a dispute between Google Inc. and CNIL, with regards to Google's refusal to 
comply with the CNIL's request to remove links from all versions of its search en- 
gine worldwide. Google argued that according to the regulations on the right to be 
forgotten, Google is obligated to remove only links that appear within search results 
conducted in the versions of its search engines with domains corresponding to the 
EU Member States. Moreover, Google suggested using geo-blocking to other do- 
main extensions, a measure that would prevent the display of the links from showing 
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within searches carried out in France, regardless of the search engine domain used. 
Google appealed to the Council of State seeking to annul a EUR 100,000 fine im- 
posed by CNIL. Due to the fact that the Council noted difficulties regarding the in- 
terpretation of the of Articles 12(b) and 14(a) of the Directive 95/46/EC, it referred 
several questions of interpretation to the CJEU for a preliminary ruling.’ In reaching 
its decision, beside the Directive 95/46/EC, the CJEU examined Article 17 of the 
GDPR, as well as Google Spain judgment. The most significant issue raised by the 
case was referred to the dilemma whether the EU data protection law on the right to 
be forgotten or to be more precise on de-referencing, should be interpreted to mean 
that a search engine operator is required to remove links on: all of the domain names 
used by its search engine so that the links at issue no longer appear or only in the 
versions corresponding to all Member States of the European Union or only on the 
version corresponding to the Member State of residence of the person that requests 
the de-referencing (C-507/17, Paragraph 43). 


Supporting the arguments of Google, the CJEU concluded that in accordance 
with the EU Law search engine operators are not obligated to remove links on all the 
versions of its search engine worldwide. However, according to the ruling of the 
CJEU, search engine operators are required to remove all the links on all the ver- 
sions in the EU regardless of where the request to de-reference originates in the EU. 
The CJEU noted that the Directive 95/46/EC and the GDPR do not indicate a territo- 
rial scope of the right to be forgotten beyond the Member States of the European 
Union nor did they intend to impose an obligation on search engine operators on de- 
referencing to include non-EU national versions of their search engines. The CJEU 
appeared to recognize the concern that an extraterritorial reach of the right to be 
forgotten wouldn’t be in compliance with the fact that the legal systems of numerous 
non-EU States do not recognize the right to de-referencing. Regarding the geo- 
blocking technique used by Google, although the CJEU did not specifically mention 
this issue, it stated that that search engine operators are required to implement meas- 
ures that would prevent or seriously discourage an internet user that conduct a search 
from one of the Member States to gain access to de-listed links when using a search 
engine version outside the European Union (C-507/17, Paragraph 73). 


> “Member States shall guarantee every data subject the right to obtain from the controller: 
... (b) as appropriate the rectification, erasure or blocking of data the processing of which 
does not comply with the provisions of this Directive, in particular because of the incomplete 
or inaccurate nature of the data...” (Directive 95/46/EC, Article 12 (b)). 

“Member States shall grant the data subject the right: ... (a) at least in the cases referred to in 
Article 7 (e) and (f), to object at any time on compelling legitimate grounds relating to his 
particular situation to the processing of data relating to him, save where otherwise provided 
by national legislation. Where there is a justified objection, the processing instigated by the 
controller may no longer involve those data” (Directive 95/46/EC, Article 14 (a)). 
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In the light of the above-mentioned considerations of the CJEU, it appeared 
that Google LLC v CNIL represents a triumph for Google and multinational big tech 
companies. However, Paragraph 72 of the judgment could neutralize Google’s vic- 
tory in this case by finding that EU law does not prohibit worldwide de-listing and 
that the Member States remain competent to order search engine operators to de- 
reference globally in certain circumstances. The CJEU acknowledged the compe- 
tence of national authorities of Member States to balance the rights to privacy and 
the protection of personal data against the freedom of information, in the light of 
national standards of protection of fundamental rights, and, when appropriate, order 
a de-referencing at a global level. In order to create common standards regarding 
their competence to balance between the rights of data subjects and freedom of in- 
formation, national authorities should cooperate with each other in accordance with 
the Articles 32, 33 and 34 of the GDPR, as part of cohesion policy.’ Therefore, in 
the light of the judgment, CNIL has the right to require from the search engine op- 
erator to remove links from all versions of the search engine if the protection of data 
subjects' rights is justified according to above mentioned standards. 

The Google LLC v CNIL case posed a significant dilemma to the CJEU. If the 
CJEU observed the right to be forgotten in the context of global de-referencing that 
would ensure full protection of the right to privacy and data protection “at the risk of 
jeopardizing its legitimacy by encroaching on the sovereignty of third States in bal- 
ancing fundamental rights” (Samonte 2019, 844). On the other hand, a regional ap- 
proach that would guarantee EU residents the protection of the right to be forgotten 
only within the Union imposes regional legal boundaries to the protection and en- 
joyment of this right on the global boundaryless Internet. The fact that the CJEU 
ruled in favor of territorial limitation of the right to be forgotten and at the same time 
left open the possibility for the global enforcement of this right remains the above- 
mentioned dilemma unanswered. 


Conclusion 


In the light of the analyses of the concept of the right to be forgotten, it seems 
that the entire right was particularly misnamed. First of all, in the context of the new 
digital reality, interpretation of the right to be forgotten as a possibility to request to 
delete certain online data does not mean that they are really forgotten in the tradi- 
tional sense. In other words, the information that a data subject requests to be de- 
linked from is not really deleted, due to the fact that it remains on the Internet. 
Search engines are only obligated to adjust their systems in the way that certain web 


* Articles 32, 33 and 34 of the GDPR are referring to the security issues of personal data: 
security of processing, notification of a personal data breach to the supervisory authority and 
communication of a personal data breach to the data subject. 
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pages wouldn't appear within search results based upon the search of a specific 
name. However, maybe instead of considering the concept of the right to be forgot- 
ten as misnamed, we should try to adjust the approach of its interpretation in accor- 
dance with new digital standards and try to be more flexible when it comes to the 
traditional meaning of the used phrase. After all, the focus of the right to be forgot- 
ten is not so much about forgetting and disappearing, as it reflects the concept of 
establishing precise legal standards related to the protection of our personal data. 

This newly designed personal right is one more attempt to place control in 
hands of data subjects, and to raise awareness about being responsible when using 
digital technology and Internet. Certainly law cannot reform quickly as digital tech- 
nology and Internet can develop, but having in mind core notions of individual 
autonomy while using as well as regulating Internet and the usage of digital technol- 
ogy in general, is one step closer to creating privacy friendly digital environment 
(Stojsi¢ Dabeti¢ 2020, 162). 

According to the latest EU regulations, as well as the jurisprudence of the 
CJEU, the right to be forgotten should be considered as a fundamental human right 
which includes balancing the individual’s right to data protection and the public’s 
right to know. One of the most concerning elements of the right to be forgotten from 
the aspect of the CJEU case law is referring to the fact that privately-owned com- 
pany, such as Google, is supposed to make the final call on the relevance of data 
from the aspect of public interest and what can be hidden from users. Thus, it is 
necessary to provide further detailed guidance to search engine operators with re- 
spect to the implementation of the right to be forgotten in a right-respectful manner, 
although some basic grounds are provided by the GDPR. 

In addition, the CJEU introduces the implementation of the right to be forgot- 
ten by search engine operators through two stages. The first one is referring to the 
obligation of the operator to check whether the rights of the data subject prevail in 
the specific situation over the economic interest of the operator or the public’s right 
to know. During the second stage, operators are obligated to determine the territorial 
scope of the right to be forgotten in connection with the judgment in the case of 
Google v CNIL. Even though, the CJEU did not state that right to be forgotten im- 
poses obligations on search engine operators outside the European Union, we cannot 
ignore the fact that the Internet has no boundaries. Therefore, global problems re- 
quire global solutions. 

Protection of the privacy and personal data in the digital age is quite challeng- 
ing. With respect to this, there is no effective legal remedy to cure a violation of 
privacy or human dignity in the digital domain. It’s up to each member of the soci- 
ety to determine the limits of the power of informational self-determination of indi- 
viduals on the Internet. 
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